Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/NiRA_W6pcargH2HSunkA2rDhp50.mft
File:                     NiRA_W6pcargH2HSunkA2rDhp50.mft (raw, json)
Hash identifier:          hm2QDOhutFqny/7m+mQTrTnILvVQ4z0PK6snGkcpvCo=
Subject key identifier:   72:7F:32:2A:78:D9:F1:F8:2B:F1:5C:6F:21:15:9E:24:CE:93:96:80
Authority key identifier: 36:24:40:FD:6E:A9:71:AA:E0:1F:61:D2:BA:79:00:DA:B0:E1:A7:9D
Certificate issuer:       /CN=362440fd6ea971aae01f61d2ba7900dab0e1a79d
Certificate serial:       019F36AA22439693714F441769E754833A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NiRA_W6pcargH2HSunkA2rDhp50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/NiRA_W6pcargH2HSunkA2rDhp50.mft
Manifest number:          11
Signing time:             Mon 06 Jul 2026 09:02:27 +0000
Manifest this update:     Mon 06 Jul 2026 09:02:27 +0000
Manifest next update:     Tue 07 Jul 2026 09:02:27 +0000
Files and hashes:         1: 0iZfFzG8zQcbIj4oUYolRYWcr6Q.roa (hash: TRs816FHSgafSehZlcBSAOl0JI7Ecr8cWWJS1nrwNuY=)
                          2: 0lt8g8lLpiqYJecZvN6tifhx9DY.roa (hash: 9LiZUeNZozYlcyeaLVshvgJIuuIZXmqCyyFPKg7cXT4=)
                          3: LsI5zfsSjbzK-FULs6vPqtoagqE.roa (hash: s9PEAwBrSwP6zTFQRrH++D0pU2vqD3A9Z5nIOQdQBiQ=)
                          4: NiRA_W6pcargH2HSunkA2rDhp50.crl (hash: ODXsg5v8nbXPbEnn0wWxVpc26mLSnXgK44JDGpfU3xU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/NiRA_W6pcargH2HSunkA2rDhp50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/NiRA_W6pcargH2HSunkA2rDhp50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NiRA_W6pcargH2HSunkA2rDhp50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 09:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:36:aa:22:43:96:93:71:4f:44:17:69:e7:54:83:3a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=362440fd6ea971aae01f61d2ba7900dab0e1a79d
        Validity
            Not Before: Jul  6 09:02:27 2026 GMT
            Not After : Jul  7 09:02:27 2026 GMT
        Subject: CN=727f322a78d9f1f82bf15c6f21159e24ce939680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7f:33:09:66:42:c6:75:2e:b1:15:9b:4a:bb:
                    e1:08:f4:20:3a:1b:7e:0f:2e:fc:32:5a:67:e5:f0:
                    f7:41:63:76:ba:da:56:e0:92:38:62:c0:60:49:0e:
                    1f:f2:29:70:0e:ac:31:77:c7:ec:a7:bb:5c:7a:40:
                    44:d2:83:93:6b:04:c8:e4:27:6c:34:59:f9:e0:85:
                    92:5e:40:69:2e:c1:bc:c2:38:1b:ee:3d:92:a6:76:
                    06:a7:c4:b2:00:81:16:d1:47:85:9d:a0:74:4e:a8:
                    34:3c:2c:56:fc:c5:18:01:33:bf:4a:ba:e6:7a:80:
                    9b:93:d8:fa:fa:62:78:ea:89:2f:49:f8:fb:c0:fd:
                    b8:72:00:da:9f:30:5f:b4:eb:0f:6e:06:cb:96:3c:
                    39:77:ee:f1:ca:af:3f:07:4e:dc:b6:3a:7e:23:ca:
                    de:36:0c:a2:4e:ca:31:66:1c:c6:72:80:89:88:be:
                    27:f1:45:21:23:70:9d:9d:8f:56:80:8f:09:2f:59:
                    19:f0:83:b9:15:7f:20:15:d4:da:36:ad:78:ff:c4:
                    96:8e:b1:3e:93:40:e9:04:33:d7:76:21:98:53:15:
                    5a:cd:7e:65:c5:08:ea:c5:9f:08:25:47:4c:c4:4b:
                    03:50:61:98:ff:5a:ae:5e:58:81:4e:cc:f5:9d:9a:
                    62:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7F:32:2A:78:D9:F1:F8:2B:F1:5C:6F:21:15:9E:24:CE:93:96:80
            X509v3 Authority Key Identifier:
                keyid:36:24:40:FD:6E:A9:71:AA:E0:1F:61:D2:BA:79:00:DA:B0:E1:A7:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiRA_W6pcargH2HSunkA2rDhp50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/NiRA_W6pcargH2HSunkA2rDhp50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/NiRA_W6pcargH2HSunkA2rDhp50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:08:39:05:25:3c:cf:8f:aa:63:b0:e6:d7:bd:c1:06:ff:72:
         a1:79:a4:66:59:b4:9f:87:25:f2:02:62:9b:87:10:ca:e8:69:
         9f:27:bb:ac:3f:21:39:04:10:14:90:cd:32:22:7e:ac:d9:7e:
         20:8d:b9:31:39:1c:8a:95:46:f0:74:67:1c:70:d8:d9:a0:95:
         a0:94:74:80:79:d7:8d:f7:f7:3e:41:85:bb:a6:53:72:74:62:
         7c:96:e8:46:a6:0d:2e:13:12:4c:62:7c:5a:cb:f3:e8:a5:0c:
         42:a1:d4:99:cc:50:78:74:ee:ee:81:80:ee:16:a9:8a:bb:71:
         4b:14:d1:d8:17:03:14:4d:59:3d:48:c9:69:98:65:a3:ee:70:
         88:b3:b0:c5:5c:3e:26:60:a7:cf:0f:f9:b5:bb:95:62:2f:54:
         7d:e6:30:d4:fd:69:7a:60:13:c1:a6:80:e1:1c:03:8e:b9:33:
         e7:b7:3c:d3:6d:0f:ad:24:8e:1f:c2:d2:2a:5f:03:24:6e:51:
         b3:ba:c4:d2:d5:bd:c1:8e:c6:37:24:51:4f:d1:17:5d:c2:83:
         30:12:ed:ca:c5:bd:d6:31:cf:7e:16:0f:f3:76:f4:0e:9c:ba:
         c9:86:51:9c:12:7e:43:4e:3a:c7:6c:ff:cb:ae:2c:f0:ef:36:
         67:60:a3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:02:47 2026 by rpki-client